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The paper presents an algorithm for control and safe landing of impaired multi-rotor 
drones when one or more motors fail simultaneously or in any sequence. It includes 
three main components: an identification block, a reconfigurable control block, and a 
decisions making block. The identification block monitors each motor load characteris- 
tics and the current drawn, based on which the failures are detected. The control block 
generates the required total thrust and three axis torques for the altitude, horizontal 
position and/or orientation control of the drone based on the time scale separation and 
nonlinear dynamic inversion. The horizontal displacement is controlled by modulating 
the roll and pitch angles. The decision making algorithm maps the total thrust and 
three torques into the individual motor thrusts based on the information provided by 
the identification block. The drone continues the mission execution as long as the 
number of functioning motors provide controllability of it. Otherwise, the controller is 


switched to the safe mode, which gives up the yaw control, commands a safe landing 
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spot and descent rate while maintaining the horizontal attitude. 


I. Introduction 

Drones are becoming increasingly popular for research, commercial and military applications 
due to their affordability resulting from their small size, low cost and simple hardware structure. 
One of the critical aspects of these uses is the reliability of the drones while maintaining their 
affordability. In particular, the civilian applications of drones are subject to safety requirements 
for the drones themselves and for the environment they are operating in. Due to weight and cost 
constraints, the hardware redundancy is not an option in improving the reliability and safety of the 
drones, which make them vulnerable to motor failures leading to potentially unsafe operations or 
collisions. 

Majority of the existing approaches is related to the fault estimation and control problems of 
impaired drones with partial loss of actuator effectiveness and employ robust, adaptive and gain 
scheduling control strategies to follow desired commands. A review of some early results on the 
control problem of multi-rotor drones with actuator faults can be found in [19], and experimental 
results on some of the actuator fault-tolerant control techniques for a quadrotor can be found in [4]. 

Recent reports in the field of the fault tolerant control design use both direct and indirect 
approaches. In the first case, the controller is designed without explicitly identifying the faults. 
In [15], a proportional-integral-derivative (PID) controller is designed off-line for each fault of the 
quadrotor’s actuators and a gain scheduling is implemented on-line assuming that the fault is known. 
In [17], an adaptive feedback linearization technique is presented for fault recovery of a quadrotor 
that is subject to a partial loss of effectiveness in one or more actuators. A dynamic inversion 
controller augmented with an off-line trained single network adaptive critic is applied to control 
an uncertain quadrotor in [18], where the uncertainties are estimated on-line using another neural 
network. In [1], a fault tolerant control scheme for multi-rotor drones with high actuator redundancy 


is presented, which is based on the integral sliding mode and fixed control allocation. A quaternion- 





based adaptive attitude control for a quadrotor in the presence of external disturbances and partial 


loss of rotor effectiveness is proposed in [20]. A cascaded controller for a hexacopter is presented 
in [8] using an extended state observer, which estimates modeling errors and propulsion efficiency 
degradation. 

In the indirect approach, first the faults are estimated, then proper controllers are designed. In 
many case the main tool is Thau observer (see for example [10], [11], [3]). In [10], Thau observer 
is used to design a fault diagnostic system while stabilizing the quadrotor at low speed with a con- 
troller based on the nested saturation. Thau observer based actuator faults detection and isolation 
scheme for a hexacopter is presented in [11]. In [3], an adaptive Thau observer is used to estimate 
the quadrotor actuator faults, rate them based on the predefined fault-tolerant boundaries and com- 
pensate for depending on the severity levels. Other approaches use model-based observations (|12]), 
Kalman filter ((21]), interacting multiple model filter and switching multi-model predictive control 
((2]) and polynomial observer ([5]). 

On the other hand, the identification and control of multi-rotor drones get more complex when 
one or more motors completely fail leading to controllability loss of one or more degrees of freedom. 
Few approaches have been reported in this case. 

When the drone has enough actuator redundancy, for example as in an octocopter, and the 
failures are known, control allocation schemes can be used to handle rotor failure [14]. Otherwise, 
not all degrees of freedom can be controlled properly. In [13], a controller is design in case of a single 
rotor failure in quadrotor vehicles using robust feedback linearization sacrificing the yaw directional 
controllability and assuming that the failure is known. Periodic solutions for a quadrotor with a 
known single, two opposing, or three propellers lost are presented in [16]. In each case, the drone 
spins about an axis found from some equilibrium conditions and fixed in the body frame. Only in 
two motor failure case this axis is vertical permitting a safe landing, which essentially resembles the 
solution in [13]. In [6], an iterative on-line optimization method is applied to a quadrotor way point 
tracking with single and double rotor failure. However, the real-time convergence may be an issue 
for small drones with restricted computational power. In [9], an algorithm for the on-line detection 
of a single motor failure and a control allocation technique is proposed, assuming that inertial forces 


and torques acting on the multi-rotor vehicle and motor thrusts can be measured, which may not 


be the case for some drones. 

This paper presents an algorithm for control and safe landing of impaired multi-rotor drones 
when one or more motors failing simultaneously or in any sequence. It includes three main com- 
ponents: an identification block, a reconfigurable control block, and a decisions making block. ‘The 
identification block monitors each motor load characteristics and the current drawn, based on which 
the failures are detected. The control block generates the required total thrust and three axis torques 
for the altitude, horizontal position and/or orientation control of the drone based on the time scale 
separation and nonlinear dynamic inversion. The altitude is directly controlled by the total thrust 
generated by the motors. The horizontal displacement as well as the orientation of the drone are 
controlled using time scale separation and nonlinear dynamic inversion, where the torques are used 
to control the fastest variables, that is angular rates, which are used to control the corresponding 
orientation angles. The last step is to use roll and pitch angles to control the horizontal displace- 
ment of the drone. The decision making algorithm maps the total thrust and three torques into the 
individual motor thrusts based on the information provided by the identification block. The drone 
continues the mission execution as long as the number of functioning motors are at least four, which 
is sufficient for the control of its altitude and orientation. Otherwise, the controller is switched to 
the safe mode, which gives up the yaw control, commands a safe landing spot and descent rate while 
maintaining the horizontal attitude. 

Our approach extends the result of [16], [13] and [9] by allowing more than one failure at a time 
and introducing more reliable and computationally inexpensive identification method. In addition, 
if a failed motor starts producing a thrust, our algorithm detects the change and appropriately 


reconfigures the controller. 


II. Dynamic Model 
The mathematical model of the drone is obtained using Newton-Euler formalism considering 
only rigid body motions. Let the position of the center of mass of the drone in the inertial frame 


FY, with vertical z-axis be 


r=2t+y)+4+ 2k, (1) 


where 2, 7, k are the corresponding unit vectors. The translational dynamics of the drone satisfy 


the equation 
Mi (t) = Lpyr()T() + D(t) + Mg, (2) 


where M is the mass, 
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is the rotation matrix from the body frame F’g to F7 with ¢, n, w being the associated Euler angles 
(see for example [7], p. 313), T(t) is the total thrust vector generated by the motors, D(t) is the 
atmospheric drag force, and g = [0 0 —g]' is the gravity acceleration. 

It is assumed that Fg frame is aligned with the drone’s principle axis of inertia, all motors 
generate thrust in the z-direction in Fg frame, that is T = [0 0 T]' in Fg, where T= 7", fi, fi 
is the thrust generated by the i-th motor, and the atmospheric drag force is proportional to inertial 
velocity, that is D(t) = —k:r(t). With this assumptions the translational dynamics can be written 


coordinate-wise 


= 

2 
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T(t) [cos @(t) sin 6(t) cos w(t) + sin @(¢) sin w(t)] — kx(t) (3) 
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T(t) [cos &(t) sin 6(t) sin w(t) — sin f(t) cos w(t)] — key(t) 


Mz(t) = T(t) cos @(t) cos O(t) — kyz(t) — Mg, 
The rotational dynamics of the drone are given in the frame F’g as follows [16] 


Jw(t) + Jy > M(t) = —w”(t) | Jw(t) + J, d_(w(t) + 9;(¢))| + 7(4)+7pdi(t), (4) 


where w = [p qr]' is the angular rate of Fg with respect to the inertial frame F; expressed in Fp, 


J = diag(Ji, Jo, J3) is the inertia matrix of the drone, J, = diag(0, 0, J;3) is the inertia matrix 
of the rotors (assuming identical for all of them), Q; = [0 0 ;]' is the i-th rotor angular rate in 
the frame F’g, T is the torque generated by the motors, Tp is the aerodynamic drag torque. The 
\T 


notation a* is introduced for the cross product operator, which for a vector a = [a, a2 as3]' is 


defined as 


—ag ay 0 
Assuming that the aerodynamic drag torque is linear in angular rate Tp = —k,w, and neglecting the 


contribution of the rotors on the left hand side of (4), we write the rotational dynamics component- 


wise 


Jip(t) = —(J3 — Ja)q(t)r(t) — Jrsq(QQ(t) + 71(t) — krp(t) (5) 
Jop(t) = =i = J3)p(t)r (€) a J,3p(t) QE) + T(t) i k,q(t) 
Isp(t) = —(J2— Ji)p(t)a(t) + t3(t) — ker (t), 


where we denote 2 = S>,_,(—1)'Q;. The angular rate w is related to the Euler angles by means of 


the kinematic equations 


o(t) 1 sin f(t) tanO(t) cos A(t) tan 6(t) p(t) 
A(t) |= }|0 ~~ cosd(t) ~ sin d(t) g(t) | (6) 
w(t) 0 sin d(t) sec A(t) cos b(t) sec O(t) r(t) 


III. Identification 
The mathematical model of the rotors, which are driven by the identical DC motors, is given 


by the Kirchoff’s current law 
Li; (t) + Ri; (t) = v;(t) — k,Q,; (8), (7) 


where L is the motor inductance, R is the motor resistance, 7;(t) is the current flowing through j-th 
motor, v;(t) is the voltage input to the j-th motor, ky is the back EMF constant, and (;(t) is the 


j-th motor angular rate, which satisfies the differential equation 
IraQj(t) + kaj (t) = bmi (t) — h(E), (8) 


where kg is th damping (friction) coefficient, and 7; (t) is the load torque experienced by the j-th 


motor. Combining the two equations (7) and (8) in Laplace domain, we can write 


kp 
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[Kmi;(s) — 73(s)] , (9) 


solving which for 7;(s) we obtain 
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Assuming the motors are small with low inductances, the equation (10) can be simplified as 


: J738 = ka kokm l 
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It can be noticed that the transfer function 


kykm 
fidynS“b dikg + hpkin 


is strictly positive real and the corresponding impulse response function 
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is always positive. Therefore, the load torque contribution in the motor current is always positive. 
This implies that the motor current sharply drops when the load torque vanishes, that is when 
the propeller has separated from the drone’s body. Hence, this type of failure can be identified by 
comparing the motor current with a threshold obtained a priori for each type of motor. When the 
motor stops rotating, that is 0,(t) = 0, it follows from (7) that 7; = v,;/R. 

Now, we present two different identification schemes. The first scheme is a simple one and 
mainly pertains to the drones with limited computational capabilities. It includes a preflight motor 
testing to determine the minimum throttle setting necessary for the take off, which corresponds 
to the each motor thrust equal to Mg/n (wight /number of motors), then to determine the motor 
current with the propeller off for that throttle setting. ‘The resulting current measurement sets the 
threshold. In some cases, this threshold value can be even provided by the manufacturer with the 
drone specifications. In the flight regime, the measured current is compared with the threshold for 
each motor. Dropping the current below the threshold indicates the failure of the corresponding 
motor. 

The second scheme, which can be used by the drones with more computational power, is based 


on the generation of the reference current values according to the equations 
(8) = yl 
d Is+R 


i (6 = ee vj(s) 
IS (Ims + ka)(Ls + R) + kokm 7°" 


(12) 


which are driven by the same voltage input as the corresponding motors. The reference current 


i?" (t) corresponds to the non-rotating motor, and 7;°(t) corresponds to the motor current with the 
propeller off. Comparing the measurements of the actual motor current with 7?"(t) and 7i°(t) we 
can determine if the corresponding motor is healthy, stopped rotating or the propeller has separated 


from the drone’s body. 


IV. Control Design 

In this section we design a controller for the multi-rotor drone independent of the system’s 
health. Since there are only four independent control inputs, we are able to track four independent 
commands. In this paper we choose altitude (z-om(t)), horizontal position (%eom(t) and Ycom(t)) 
and the yow angle or camera direction (wcom(t)) commands to track. The drones altitude is directly 
controlled by the total thrust generated by the rotors. For the horizontal position a cascaded control 
architecture is adopted, which is justified by the time scale separation between slow horizontal 
position, fast attitude and faster angular rate variables. Accordingly, there are three control loops. 
The outer loop generates roll and pitch commands (¢com(t) and (@com(t)) such that x(t) and y(t) 
respectively track the desired commands 2eomz) aNd Yeom(t), the middle loop generates the angular 
rate commands (pceom(t), dcom(t), Tcom(t)) such that the attitude variables ¢(t), O(t) and y(t) 
respectively track the attitude commands ¢c¢om(t), Pcom(t) and Wceom(t), and the inner loop generates 
the require torques 7,(t), 7T2(t) and 73(t) such that the angular rates track the rate commands 


generated by the middle loop. 


A. Altitude Control 
We design the altitude control using the last equation in (3). The objective of this controller is 


to track the reference signal z,. f(t), which is generated through a reference dynamics 
Zref (t) — —Cz1Zref (t) — Cz2 ener (t) — Zcom (t) ) (13) 


where Zcom(t) represents the altitude command, cz; > 0 and c,2 > O are the design parameters 


representing the performance characteristics, such as desired altitude change rate, overshoot, etc. 


For this design we use dynamic inversion method and set 


1 


T(t) = Sa cosa (Mus + bez) + Mal (14) 


where v,(t) is the pseudo control, which is defined from the perspective of exponential stability and 


transient performance of the error signal e,(t) = z(t) — Zrer(t). To this end we set 
U3) Sen) =e 20) seers) (15) 
which results in the exponentially stable error dynamics 


é,(t) = —c,1€,(t) — cz2e2(t). (16) 


B. Horizontal Position Control 
We assume that —7/2 < ¢,0 < /pi/2, that is there are no flip over maneuvers. This assumption 
ensures that the functions sin ¢ and sin @ are one-to-one invertible. We apply the dynamic inversion 


technique to the firs two equations in (3) and set 
t(t) = v,(t) (17) 


where the pseudo controls v,(t) and v,(t) are defined from the perspective of tracking the reference 


models 
Lea (t) = S=Cxit ee (t) — Cy2 Des (t) — Leom (t)| (18) 
Uref (t) — —Cy1 Vref (t) — Cy2 rasp (t) — Ycom (t)| ’ 


where ®eom(t) and Yeom(t) are the horizontal position commands, cz1 > 0, Cra > 0, Cy1 > 0, Cy2 > 0 
are the design parameters representing the performance characteristics. Similar to the previous case, 


these pseudo controls are set to 


Ut) = Senet) — ee a(t) = veo ©) (19) 


Vy(t) = —Cy1 y(t) — Cy2 y(t) - Voorn t)| 


The roll and pitch commands are obtained by solving the nonlinear system of equations 
T(t) [cos #(t) sin 6(t) cos w(t) + sin @(t) sin =(t)| — kya (t) = Mv-(t) (20) 
T(t) [cos $(t) sin O(¢) sin w(t) — sin A(t) cos Y(t)] — key(t) = Mv, (t) . (21) 


Multiplying the first equation by cos7~(t) and the second equation by sin w(t), and adding them 


results in 


T(t) cos @(t) sin A(t) = [Mvz(t) + k:x(t)] cos w(t) + [Mv,(t) + key(t)] sin p(t) . 


Similarly, multiplying the first equation by sin w(t) and the second equation by cos w(t), and sub- 


tracting them results in 


T(t) sin b(t) = [Mv,(t) + k&(t)| sin W(t) — (Mv, (t) + ky (t)] cos (Et) . 


The attitude angle commands are easily obtained by inverting the szn function 


Ose) San Cr {|Mvz(t) + k:x(t)| sin p(t) — (Mv, (t) + key(t)| cos v()) (22) 
Gee ty = ein (aE {|Mvz(t) + k:x(t)| cos b(t) + (Mu, (t) + key(t)| sin v(®)) 


which result in the following exponentially stable dynamics for error signals e,(t) = x(t) — Lref(t) 


and e,(t) = y(t) — Yres (t) 


Ex(t) = —Cy1éz(t) — Ce2€x(t) (23) 


Ey(t) = —Cyiéy(t) — cyrey(t) . 


C. Roll Control 
Here, the objective is to design a control torque 7,(t) such that the roll angle ¢(t) tracks the 


reference signal ¢,- f(t) generated through the dynamics 


dbref (t) —= —C¢ Pref (t) _ Pcom(t)| ’ (24) 


where cg > 0 is the time constant. For this purpose, we use time scale separation and dynamic 


inversion. First we derive an expression for the desired roll rate using the first equation in (6) 
. t . 
Det) = colt) 1c, / eg(t)dt + bres (t) — g(t) sin d(t) tan O(t) — r(t) cos @(t) tan A(t), (25) 
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where eg(t) = o(t) — dre f(t) is the roll angle tracking error, & > 0 and Cs > 0 are the proportional 





and integral gains, then we derive the required control torque using the first equation in (5) 


J3 — Jo 
Ji 





T1 (t) = —Cp€p(t) = k p(t) a q(t)r(t) “F Ir3q(t)Q(t) ’ (26) 


where c, > 0 is the control gain, and e,(t) = p(t) — peom/(t) is the roll rate tracking error. 


D. Pitch Control 
Now, we design a control torque 7T2(t) such that the pitch angle @(t) tracks the reference signal 


O,e¢(t), which satisfies the dynamics 


Orep(t) = —Co [Prep (t) — Pcom(t)] , (27) 


where cg > 0 is a design parameter. Using time scale separation and dynamic inversion, we first 


derive the desired pitch rate command from the second equation in (6) 





Gent) Seren te, | eg(t)dt + Bre (t) — q(t) sin f(t) tan @(t) — r(t) cos (t) tan O(t), = (28) 


where eg(t) = 0(t) — 0,ef(t) is the pitch angle tracking error, ch > 0 and cf > 0 are the proportional 


and integral gains, then we obtain the required control torque from the second equation in (5) 


Jy ds 


i p(t)r(t) — Jr3p(t)Qce) , (29) 


To(t) = —Cgeq(t) + kpq(t) + 





where c, > 0 is a design parameter, and e,(t) = ¢(t) — deom(t) is the pitch rate tracking error. 


EF. Yaw Control 
Finally, we design a control torque 73(t) such that the yaw angle y(t) tracks the reference signal 


Wrer(t) generated through the dynamics 


trep(t) = —Cy [Wrep(t) — Veom(t)] ; (30) 


where c, > 0 is a design parameter. Similar to the previous case, we first derive an expression for 


the desired yaw rate using the third equation in (6) 
. t . 
Feom(t) = cyep(t) + cy | Ey (t)dt + Wrer(t) — g(t) sin d(t) sec A(t) — r(t) cos P(t) sec A(t), — (31) 
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where ey,(t) = Y(t) — Yrep(t) is the yaw angle tracking error, c), > 0 and Cy > 0 are the proportional 


and integral gains. The required control torque is designed using the third equation in (5) 


J, — J3 
J3 





73(¢) = =—(Ce = kp )ex(t) + p(t)a(t) , (32) 


where c, > 0 is the control gain, and e,(t) = r(t) — reom(t) is the yaw rate tracking error. 


V. Decision Making 


For a nominal multi-rotor drone, the total thrust and three torques are related to the individual 


motor thrusts trough a control allocation matrix B ¢ R**", which is defined as 


F i We gee. Hl fi 
TI Digs OD. <2 Ory J2 
= , (33) 
T2 bo1 bo2 ... ban 
| 7 | | bs b39 + Ban | | fn | 
SSsose__—————_ an _ 
uw B - 
where the coefficients b;;, 7 = 1,2, 7 =1,...,n are easily derived from the geometry of the drone, 


and 63; = (—1)/d, 7 =1,...,n, where d is the ratio between the drag and the thrust coefficients of 
the propeller blade. ‘Therefore, the individual thrust settings can be found by solving the equation 
(33) for f. 

When the j-th motor failure is identified, f; is set to zero and removed from the right hand 
side of (33), and the j-th column of matrix B is deleted. Let the number of failed motor be 
m(0<m<n-—5) andp=n-—™m™ (p> 5). Then matrix B is (4 x p) - dimensional. That is, the 
equation (33) has more than one solution, and some optimization routine can be applied. Here, we 


use simple Moore-Penrose inverse to obtain the solution 
f=B'(BB')u. (34) 
When p = 4, then B is an invertible (4 x 4) matrix, hence a unique solution exists 


f=B tu. (35) 
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Therefore, in case of p > 4 the decision making logic does not alter the external position and/or 
attitude commands. 

When p < 4, controlling for independent states is not achievable anymore, and the safe landing 
mode is activated. In this mode, our algorithm gives up the yaw control, and commands a safe 
landing of the drone. It is worth to notice that the horizontal position control is still achievable, but 
it requires roll and pitch angle modulation, which is not a safe maneuver when the drone is close 
to the ground. For this reason, the safe landing algorithm is executed in two steps. First step is to 
maintain a safe altitude while moving the drone in the hovering position over the safe landing spot. 
This altitude depends on the environment such as buildings, people, natural obstacles etc., or on 
the mission such as carrying a tethered load etc., and is set by the pilot or autopilot. The second 
step is to set Zcom(t) = 0 (landing), dcom(t) = 0 and @com(t) = 0 (horizontal attitude), and compute 
T(t), ™1(t) and 72(t) according to equation (14), (26) and (29). The individual motor thrusts are 
computed according to (35) by first deleting the last row of the matrix B and removing 73 from wu. 


We summarize the decision making algorithm as follows 
e If m=0, use (34) with nominal B to compute individual motor thrusts f;, 7 =1,...,n. 


e lfm > 0, set f;, =0,...,f;,, = 0 and delete the 71,...,Jm columns of matrix B, where the 


indexes 71,..-,Jm Of failed rotors are provided by the identification block. 


e If p > 4, use (34) to compute individual motor thrusts f;, 7 € {1,...,n}—{91,---,jm} 


e If p =4, use (35) to compute individual motor thrusts f;, 7 € {1,...,n}—{91,---,jm} 


e If p < 4, activate the safe landing mode. 


VI. Simulation Results 
For the demonstration of the benefits of the proposed algorithm we use the quadrotor Armattan 
CF-226 presented in Figure 1 in our numeriacal simulation study. The quadrotor technical spec- 
ifications are: Flight Controller - 3DR Pixhawk (Firmware 3.2.1), 32-bit STM32F427 Cortex M4 
core with FPU, 168 MHz/256 KB RAM /2 MB Flash, 32 bit STM32F103 failsafe co-processor; Sen- 


sors - ST Micro L3GD20 3-axis 16-bit gyroscope, ST Micro LSM303D 3-axis 14-bit accelerometer / 
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magnetometer, Invensense MPU 6000 3-axis accelerometer /gyroscope, MEAS MS5611 barometer; 
Motors - T-Motor MN1806; ESCs - F-12A Fire Red series SimonKk; Battery - Turnigy 1800mAh 35 
30C Lipo; Propellers - APC 5.5x4.5; Total mass: 0.516 kg (with battery). The frame is in ”x” - 
configuration with arm lengths of 0.125 m. 

Figure 2 displays motor current readings for the quadrotor with two propellers off. It can 
be observed that the corresponding readings are much less than the healthy motors current read- 
ing as predicted by the identification algorithm. From the readings it can be concluded that the 
identification threshold can be set 1.4 amps. 

In the simulation experiment, the drone is commanded to climb to an altitude of 6 meters from 
the zero initial position. At t = 20sec one of the motors fails. The drone is commanded to stabilize 
at the altitude of 6 meters for 5 sec, then to land. At time t = 20 sec the control is switched to 
the safe mode. Figure 3 displays the algorithm performance for the position control. Obviously the 
control objective has bee met. 

Figure 4 displays the orientation angles of the drone. It can be seen that the yaw angle is 
growing starting at t = 20sec, when the safe mode controller has taken over giving up the yaw 
control. ‘This indicates that the drone goes into a spin, the rate of which is associated with the 


imbalance between the right and left rotating motors. 


VII. Conclusion 
We have presented an algorithm for detecting /identifying the failures of the multi-rotor drones, 
the reconfigurable controller capable of continuing or aborting the mission based on the switching 
logic of the decision making algorithm, assuming that the parameters and the dynamics of the drone 
are known. The performance of the presented algorithm is guaranteed as long as the drone retains 
controllability in vertical direction and the stabilizability in the horizontal plane. The benefits of the 
proposed architecture have been demonstrated in simulations. Future research will include extension 


of the proposed algorithms to the case of uncertain drones as well as in flight experiments. 
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Fig. 1 Quadrotor Armattan CF-226. 
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